CRA Books and Records Requirements for a Small Business in Ontario

Every business registered in Ontario — sole proprietorship, partnership, or corporation — has a legal obligation to keep adequate books and records to support what it reports to the CRA. Most owners know this in the abstract. Fewer know exactly what counts as an adequate record, how long it needs to survive, and what actually happens if a review turns up gaps.

This isn’t a bookkeeping how-to. It’s the legal baseline: what the CRA can require you to produce, and why falling short is a real compliance risk, not just an inconvenience.

What Counts as a "Record"

CRA’s definition of records is broad by design. It generally includes:

• Sales invoices and receipts
• Purchase invoices and expense receipts
• Bank and credit card statements
• Payroll records, if you have employees
• Contracts and agreements relevant to the business
• General ledgers, journals, and financial statements
• Records supporting any claimed deduction or credit — including the workspace, mileage, or asset records behind a specific claim

The common thread: a record is anything that supports a figure you’ve reported, or that CRA would need to verify that figure is accurate.

Where and How Records Must Be Kept

Business records generally need to be kept in Canada, in English or French, and in a form that allows CRA to actually review them — whether that’s paper, an accounting software file, or scanned digital images, as long as they’re legible and retrievable. If your books are kept electronically, CRA can require access to both the records and, if requested, the software or format needed to read them.

How Long You Need to Keep Records

There isn’t a single blanket number that applies to every type of record in every situation — CRA guidance sets specific minimum retention periods, and you should confirm the current requirement for your circumstances before assuming any particular length is enough. As a practical benchmark, remember that CRA’s normal reassessment period — the window in which it can typically reassess a return without special grounds — runs three years for individuals and Canadian-controlled private corporations, and four years for other corporations, from when the original assessment was sent. Your records need to outlive that window at minimum, and longer if:

• CRA alleges misrepresentation attributable to neglect, carelessness, or fraud (which can reopen an otherwise closed year)
• You’ve signed a waiver extending the reassessment period for a specific issue
• The records relate to a capital asset you still own, a loss you’re carrying forward, or an objection or appeal that’s still active

When in doubt, keep records longer rather than shorter — a destroyed record you needed is a problem with no fix, while a few extra years of digital storage costs almost nothing.

What Happens If Your Records Fall Short

If CRA reviews or audits your business and can’t verify a reported figure because supporting records don’t exist or can’t be produced, the practical consequences typically include:

• Disallowed deductions or credits — if you can’t support an expense, CRA can simply deny it, increasing your taxable income.
• Reassessment based on CRA’s own estimate — in the absence of adequate records, CRA has tools to estimate income (for example, using bank deposit or net-worth analysis), which tends to produce a less favourable result than your own books would.
• Penalties and interest on any resulting reassessment, on top of the additional tax itself.
• Escalated scrutiny in future years, since a business with a documented recordkeeping problem is more likely to draw a closer look next time.

None of this requires any suggestion of dishonesty — inadequate records create risk on their own, independent of whether the underlying numbers were accurate.

Recordkeeping Checklist for a Small Ontario Business

• [ ] Every sale is supported by an invoice or receipt
• [ ] Every claimed expense has a corresponding receipt or invoice
• [ ] Bank and credit card statements are retained and reconciled to the books
• [ ] Payroll records are kept for every employee, if applicable
• [ ] Records are stored securely, backed up, and retrievable years later
• [ ] A clear retention schedule is followed rather than ad hoc deletion
• [ ] Records tied to long-lived assets, loss carryforwards, or open disputes are flagged for longer retention

Frequently asked questions